
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
File: c753282b-6491-33e8-a0e1-bab307a0dd28.roa (raw, json)
Hash identifier: DIX0uQPoeC3BUwlFOR77lA7S74yF9RDppVZ5D+MlmQg=
Subject key identifier: 65:03:1D:A8:71:ED:9A:10:25:AD:E0:53:2E:69:6F:F3:A5:06:FC:D9
Certificate issuer: /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial: 010D0C9F4328584D143D0FC0F80A5F9657867600
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 7018
IP address blocks: 139.125.0.0/16 maxlen: 16
192.205.31.0/24 maxlen: 24
192.205.32.0/22 maxlen: 22
192.205.36.0/23 maxlen: 23
199.178.180.0/24 maxlen: 24
204.159.108.0/22 maxlen: 22
206.141.192.0/24 maxlen: 24
206.141.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:0f:c0:f8:0a:5f:96:57:86:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=c1a3fa5e-1c63-4be3-86cd-d790034592fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:33:75:32:98:e7:d4:f5:40:21:fb:58:d8:
a7:44:48:05:24:b6:d7:85:a6:ae:db:d4:55:47:f1:
39:05:49:0b:80:4b:2e:24:94:12:23:58:aa:4c:8b:
68:66:31:d1:82:f8:af:34:00:b4:ad:63:b8:3d:eb:
1a:9b:ab:0c:fa:99:20:c8:e6:51:ba:aa:26:9f:1c:
09:54:77:e9:63:3e:23:66:f2:b8:ed:e0:f2:ac:85:
84:a5:57:a1:cd:25:09:0e:10:79:6e:e6:db:5a:72:
5d:6f:02:13:a3:30:00:0d:26:b0:51:83:ae:1a:53:
c1:fb:18:9d:70:1f:d1:eb:b0:81:d2:98:c8:b2:ec:
a3:0d:db:c6:c9:98:1c:30:68:01:b0:81:0d:66:c5:
02:4f:e9:fe:79:d1:32:e7:3c:4d:05:a3:c7:ab:5c:
09:63:95:6c:03:84:56:d5:23:4b:23:2a:61:4d:a7:
e1:b3:fd:d2:ac:8c:a0:ca:d9:ba:b8:c1:71:58:9e:
f6:f1:a6:ba:eb:eb:22:c6:89:e0:d8:a1:7b:e8:25:
0d:04:a5:30:6b:b8:87:0a:77:f3:0d:33:58:ce:30:
4c:f6:58:59:b7:2f:a8:b9:86:09:b7:81:3e:e9:eb:
90:b1:3b:82:2d:84:b3:63:24:f0:17:4f:37:0b:69:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:1D:A8:71:ED:9A:10:25:AD:E0:53:2E:69:6F:F3:A5:06:FC:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
X509v3 Authority Key Identifier:
keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
sbgp-ipAddrBlock: critical
IPv4:
139.125.0.0/16
192.205.31.0-192.205.37.255
199.178.180.0/24
204.159.108.0/22
206.141.192.0/24
206.141.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:95:58:75:55:d2:3b:c1:7d:72:fe:07:cc:7c:9d:93:39:9b:
d5:9f:4d:e3:f9:bb:9b:27:43:b5:83:6f:82:e4:a4:b9:db:60:
d1:4f:0a:6c:2c:0e:75:59:36:5b:61:13:db:17:7d:92:2a:d3:
e1:ce:ff:ea:bf:86:bb:55:9c:eb:00:e2:17:71:37:0a:ad:26:
fc:f5:22:14:eb:c5:a5:9d:84:85:2c:2f:c6:d5:c9:d0:aa:a2:
6d:e3:bc:d7:73:13:b6:a8:a2:a9:83:db:ee:42:31:66:67:3c:
09:2b:9f:7e:86:ce:ed:dd:bc:db:8e:8c:5e:d5:ac:26:f2:43:
f2:08:55:74:ea:bc:64:74:a1:b5:78:99:4c:a7:13:63:04:91:
23:92:eb:be:14:f0:27:ee:af:c7:d4:b2:80:ce:3c:14:5c:6f:
c7:cd:56:ed:b6:1e:ab:c9:7c:b1:2e:db:5e:12:12:b0:10:0d:
b3:23:02:80:7a:b7:04:46:e9:a8:1a:d4:0d:ef:b4:ef:df:05:
12:7e:72:71:32:81:18:59:ea:64:fe:67:c3:45:90:f9:44:ae:
94:cf:f6:e0:43:07:11:b8:3d:cd:24:ac:db:1b:c2:12:e6:dd:
4c:a1:74:85:22:11:f4:81:54:94:c2:84:ec:2c:c7:e8:6d:6e:
f8:b9:cd:97
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWE0UPQ/A+ApflleGdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NmZTY2M2MtODg3OC00Y2MwLWE3NzItMTdlNzZhNDkz
MDQwMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
YzFhM2ZhNWUtMWM2My00YmUzLTg2Y2QtZDc5MDAzNDU5MmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc0zdTKY59T1QCH7WNinREgFJLbXhaau29RV
R/E5BUkLgEsuJJQSI1iqTItoZjHRgvivNAC0rWO4Pesam6sM+pkgyOZRuqomnxwJ
VHfpYz4jZvK47eDyrIWEpVehzSUJDhB5bubbWnJdbwITozAADSawUYOuGlPB+xid
cB/R67CB0pjIsuyjDdvGyZgcMGgBsIENZsUCT+n+edEy5zxNBaPHq1wJY5VsA4RW
1SNLIyphTafhs/3SrIygytm6uMFxWJ728aa66+sixong2KF76CUNBKUwa7iHCnfz
DTNYzjBM9lhZty+ouYYJt4E+6euQsTuCLYSzYyTwF083C2m6RQIDAQABo4IDejCC
A3YwHQYDVR0OBBYEFGUDHahx7ZoQJa3gUy5pb/OlBvzZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jY2Zl
NjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3NmE0OTMwNDAvYzc1MzI4MmItNjQ5MS0z
M2U4LWEwZTEtYmFiMzA3YTBkZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2NmZTY2M2MtODg3OC00Y2MwLWE3
NzItMTdlNzZhNDkzMDQwL2NjZmU2NjNjLTg4NzgtNGNjMC1hNzcyLTE3ZTc2YTQ5
MzA0MC5jcmwwHwYDVR0jBBgwFoAU/2L6gldR0zn/TiyQIVW+1KjY3vAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jY2ZlNjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3
NmE0OTMwNDAuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwMAi30wDAME
AMDNHwMEAcDNJAMEAMeytAMEAsyfbAMEAM6NwAMEAc6N+jBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBlVh1
VdI7wX1y/gfMfJ2TOZvVn03j+bubJ0O1g2+C5KS522DRTwpsLA51WTZbYRPbF32S
KtPhzv/qv4a7VZzrAOIXcTcKrSb89SIU68WlnYSFLC/G1cnQqqJt47zXcxO2qKKp
g9vuQjFmZzwJK59+hs7t3bzbjoxe1awm8kPyCFV06rxkdKG1eJlMpxNjBJEjkuu+
FPAn7q/H1LKAzjwUXG/HzVbtth6ryXyxLtteEhKwEA2zIwKAercERumoGtQN77Tv
3wUSfnJxMoEYWepk/mfDRZD5RK6Uz/bgQwcRuD3NJKzbG8IS5t1MoXSFIhH0gVSU
woTsLMfobW74uc2X
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:44 2026 by rpki-client